Claims 

A method for encrypting an electronic message composed by a sender using an 
abbreviated address book for delivery over a mail system to a recipient who 
Jiolds a digital certificate, comprising: 

(aO when the sender is off-line, inserting an encryption flag in a header 
\ associated with the electronic message; 

(b) xplacing the header and the message in plain text in an outbox; 

(c) when the sender is on-line, in response to the flag, requesting the digital 
certificate from the mail system; and 

(d) using ihe received certificate to encrypt the plain text mail message. 

The method according to claim 1 further comprising: 

(e) sending the encrypted mail message to the mail system. 

The method according terclaim 1 further comprising: 

(f) when the sender is oh-line, if the flag indicates that the message is 
encrypted, sending the\ncrypted mail message to the mail system. 

The method according to claim 1 wterein step (c) comprises: 
(c1) requesting the digital certificatesfrom the mail system; and 
(c2) if the certificate is unavailable, informing the sender that the message 
cannot be encrypted. \ 

The method according to claim 4 further comprising: 

(g) sending the unencrypted mail message in tnfe outbox to the mail system 
when the message cannot be encrypted. \ 
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6. The method according to claim 1 wherein the header comprises information 
identifying the recipient and step (c) comprises: 

(c3) using the identifying information to locate the recipient in the mail system 
and to retrieve the certificate. 

Apparatus for encrypting an electronic message composed by a sender using an 
abbreviated address book for delivery over a mail system to a recipient who 
holdsja digital certificate, comprising: 

a\mail composer which inserts an encryption flag in a header associated 
with the electronic message when the sender is off-line; 

a sending mechanism which places the header and the message in plain 
text in an outbW 

a verification mechanism which is operable when the sender is on-line 
and, in response toSthe flag, requests the digital certificate from the mail system; 
and \ 

an encryption mechanism which uses the received certificate to encrypt 
the plain text mail messagV 



The apparatus according to claim 7 further comprising: 
an outbox mechanism which senos the encrypted mail message to the mail 
system. \ 

The apparatus according to claim 7 further comprising: 

a mail mechanism which operates wnen the sender is on-line and, if the 
flag indicates that the message is encrypted, sends the encrypted mail message 
to the mail system. \ 

The apparatus according to claim 7 wherein the verification mechanism 
comprises: \ 
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3 \ a mechanism which requests the digital certificate from the mail system; 

4 \nd 

5 \ warning apparatus which informs the sender that the message cannot be 

6 \ encrypted if the certificate is unavailable. 

1 11. The apparatus according to claim 10 further comprising: 

2 An olrtbox mechanism which sends the unencrypted mail message in the 

3 outbox to the rnail system when the message cannot be encrypted. 

1 12. The apparatus according to claim 7 wherein the header comprises information 

2 identifying the recipient and wherein the verification apparatus comprises: 

3 a locator which uses the identifying information to locate the recipient in 

4 the mail system and to retrieve the certificate. 

1 13. A computer program product for encrypting an electronic message composed by 

2 a sender using an abbreviated aodress book for delivery over a mail system to a 

3 recipient who holds a digital certificate, the computer program product comprising 

4 a computer usable medium having cornputer readable program code thereon, 

5 including: \ 

6 program code operable when the sei^der is off-line, for inserting an 

7 encryption flag in a header associated with the electronic message; 

8 program code for placing the header ana the message in plain text in an 

9 outbox; \ 

10 program code operable when the sender is on-line and, in response to the 

11 flag, for requesting the digital certificate from the maiPsystem; and 

12 program code for using the received certificate to^encrypt the plain text 

13 mail message. \ 

1 14. The computer program product according to claim 13 further comprising: 
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program code for sending the encrypted mail message to the mail system. 

The computer program product according to claim 13 further comprising: 
program code operable when the sender is on-line and, if the flag 
indicates that the message is encrypted, for sending the encrypted mail message 
to the mail system. 

The computer program product according to claim 13 wherein the program code 
for requesting the certificate comprises: 

program code for requesting the digital certificate from the mail system; 

and 

program opde for informing the sender that the message cannot be 
encrypted, \ the certificate is unavailable. 



The computer prograrh product according to claim 16 further comprising: 

program code fonsending the unencrypted mail message in the outbox to 



the 
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mail system when the rtoessage cannot be encrypted. 



The computer program product according to claim 13 wherein the header 
comprises information identifying the recipient and the program code for 
requesting the certificate comprises: N 

program code for using the identifying information to locate the recipient in 
the mail system and to retrieve the certificate. 



A computer data signal embodied in a carrierswave for encrypting an electronic 
message composed by a sender using an abbreviated address book for delivery 
over a mail system to a recipient who holds a digital certificate, the computer 
data signal comprising: 
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\, program code operable when the sender is off-line, for inserting an 
encryption flag in a header associated with the electronic message; 

program code for placing the header and the message in plain text in an 
outbox; 

program coctevoperable when the sender is on-line and, in response to the 
flag, for requesting the digital certificate from the mail system; and 

program code for usingth^received certificate to encrypt the plain text 
mail message. 



The computer data signal according to claim 19 rancher comprising: 

program code for sending the encrypted mail mdSs^age to the mail system. 
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